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Explanations of the Patent Claims 



Claims 31, 33, 34, 37-43 and Claim 53 are cancelled. 

Claims 28-30, 32, 35. 36 and 44-52 are amended and reasons given. 

In the claims, insertions are underlined words and deletions are in bold typeface within 
square brackets [ ]. 

The following explanations clarify the novelty, inventive steps and industrial 
applicability of this invention and claims. To avoid confusion in terminology such as 
"Data Identification Number", "Index Number'*, "PIN", "Card Identification Number" 
and "Account Number", here arc the definitions of terms used in my application and the 
explanation: 

Each Multi- Application Card (MAC) has a number. This is referred to in the claim as a 
"data identification number" and in explanations as a "MAC identification number". 
The MAC identification number is read from the MAC by a card reader device. 

Each MAC corresponds to a record in a database. Each record in the database (whose 
key is the MAC Identification Number) contains sub-records; each sub-record is 
locatable by the MAC identification nxmiber and an Index Number, also referred to as a 
Card Identification Number (CIN). The Index Number, typically a 4-digit number, is 
physically entered at a data entry device such as a keypad. 

Most credit and debit card users are familiar with the use of a Persona l Identification 
Number (PIN), which has served to identify the owner of a debit card. A PIN is also 
typically a 4-digit number, physically entered at a data entry device such as a keypad. 

NOTE: Card industry research found that OVER 90% OF CARD OWNERS USE 
THE SAME PIN FOR ALL THEIR DEBIT, CHECK, ATM AND CONVENIENCE 
CARDS. This is logical because a PIN identifies the person, not the card. CREDIT 
CARDS ARE SIGNATURE-VERIFIED AND DO NOT USE PINS- 

In my invention, each sub-record within the group referred to (in claims 28 and 50) as a 
"first subset" of index numbers identifies (or contains, or points to) a single account 
number. The account number could be a credit card number, a debit card number, 
driver's license number, etc. Each sub-record within the group referred to (in claims 29 
and 51) as the "second subset" of index numbers contains (or points to) a Lock code 
instead of an account niunber. Each sub-record within the group referred to (in claims 30 
and 52) as the "third subset" of index numbers contains (or points to) an Unlock code, 
instead of an account number or a Lock code. 

Here are the steps involved in using my invention: 

1. The multi-application card (MAC) is read at a card reader The card reader reads 
the MAC identification number. 
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2. As when using a debit card, the user is asked to physically enter a number in the 
keypad. The user manually enters a number (called an Index Number or Card 
Identification Number), typically a 4-digit number. 

3. The MAC Number and the Index Number are sent ftom the pomt-of-sendce to the 
card translator system. Using the MAC number, the translator locates a record in its 
database. The index number (or Card Identification Number) is used to find a sub- 
record (or entry) within the record. If, as the claim reads, the index number is within 
Hie first subset of index numbers (i.e. the sub-record identifies or contains an account 
number), that account number is retrieved and processing continues. The account 
number could be a credit card number, a debit card number or some other account 
number. If the index number is within the second subset of index numbers (i.e. the 
sub-record identifies or contains a Lock code instead of an account number), the 
entire record is flagged as "locked" or "disabled". The MAC can no longer be used 
to access an account number from the database until the lock flag is removed. If the 
index number is within the third subset of index numbers (i.e. the sub-record 
identifies or contains an Unlock code instead of an account number or Lock code), 
the Lock flag for the record is removed, effectively "unlocking" or "re-enabling" the 
MAC. 



Re: US Patent 5.770,843 (ROSE et al.): 

In contrast to my invention, here's how the ROSE system works: 

1 . The multi-application card (MAC) is swiped at a card reader. The card reader 
reads the MAC identification number. That's where the similarity ends. 

2. The MAC number is sent to the remote system. It reads the record, searches all the 
sub-records (or entries) for account numbers in the record and displays ALL accounts 
on a screen for the user to select one. 

3. With all accounts on the MAC displayed - before having to enter anything - the 
user chooses one of the accounts, e.g. a Bank of America (BofA) Debit card. 

4. The system now asks for the PIN of the BofA Debit card. The user enters the PIN 
for the BofA Debit card at a data entry device. 

5. The PIN is sent to the remote system. If the PIN (which can be the same for ALL 
the accounts) matches that of the BofA Debit card, the transaction is allowed to 
proceed. 

Differences between ROSE and the current Invention: 

Here are important differences between my invention and that of ROSE et aL: 

1 . ROSE uses PINs, which (in over 90% of cases) are found to be the same for all 
accounts of a card owner, while my invention uses Index Numbers which must 
be unique for each account, enforcing better seciuity. 
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2. ROSE discloses to a potential thief ALL the accounts on a MAC record by merely 
swiping the MAC at a point-of-service terminal - even before the user is asked to 
enter anything. As a result, any user (including a thief) could never make a 
mistake in selecting an account - because ALL accounts are shown and the user 
selects from among them. If there are 5 accounts on the MAC, in the ROSE 
invention, only 5 accounts are displayed and the user has 5 possible choices. In 
my invention (assuming 4 digits are used for the Index/CIN), there are 10,000 
possible numbers (0000 to 9999) that the user could enter. Of the 1 0,000 possible 
numbers, typically more than 99.9% would be incorrect. Only the owner would 
know what accounts are on the MAC and the unique Index Number pertaining to 
each account. 

3. Credit cards do not use PINs. In the ROSE system, if the MAC database uses the 
same PIN as the card issuer, a thief with a Multi-Application Card could simply 
swipe the MAC and select a credit card - which has no PIN - to use it. 

4. Let us assume the ROSE invention forces a PIN on all cards including credit 
cards. Again, the thief sees all the accounts on the MAC by merely swiping the 
MAC at a point-of-sale terminal. If the thief knows the PIN of any one card 
belonging to the MAC owner, inherent in the design and confirmed by industry 
statistics, the thief could almost certainly use all the accounts on the MAC. 
Ironically, the ROSE invention would help a thief by displaying all the card 
accounts on the MAC, by simply swiping it at a point of sale. My invention 
requires the user to enter the index/CIN of a valid card account without displaying 
what accounts are on the MAC. Even if the MAC owner uses the PIN of a card as 
its index/CIN, a thief with one PIN could access only one account on the MAC. 

5. The ROSE invention requires multiple exchanges of messages between the card 
reader and the database to identify a specific account number. By using unique 
index numbers for each stored account, my invention requires just one exchange 
of messages to identify a specific account number. This is extremely important 
because even milliseconds matter when it comes to card authorization. 

6. The ROSE invention was designed for a kiosk; it requires a device that can 
display all accounts on the record so that a user can select from among them. My 
invention does not require such a device; it can use a standard debit card keypad. 

7. Changes in account numbers (whether in ROSE or my invention) would require a 
change to both databases - the card issuer database and the MAC database. 
However, in the ROSE invention - unless the MAC uses a different PIN from that 
in the card issuer database - a change in the PIN of any account would require a 
change in the database of the card issuer and also a change to the PIN in the MAC 
database. In my invention, changes to CINs and PINs are independent of each 
other. If the MAC owner changes the index number (or CIN) of an account, no 
change is required to the issuer database. If the MAC owner changes the PIN of a 
card, the only database needing the change is the issuer database. Since the MAC 
database in my invention does not use account PINs, no change is required to it. 

8. In the ROSE invention, it is NOT possible to identify an account number 
using the MAC Identification Number and the FIN because multiple 
accounts have the same PIN. In ROSE, the FIN is used to merely confirm a 
previously-selected (and already identified) account number. In my 
invention, the two data items, Lc. the MAC Identification Number and the 
Index, are sufficient to identify an individual account number. 

9. I believe use of the words "identify" and "single account number" in my claims 
differentiates this invention from ROSE. The Committee of 3 Examiners at the 
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European Patent Office (Euro. Pat. EP 1221 144) acknowledges the difference and 
so does the Canadian Intellectual Property Office. The USPTO Examiner of this 
application also acknowledges the difference and is seeking rewording of the 
claims to reflect the difference. Therefore, as in my Canadian patent application 
(CA 2,381 ,807, for which I now have a Notice of Allowance on 21 claims), I have 
amended my claims to state that the data identification number and the index 
number identify "a single account number", clearly different from the teachings of 
ROSE and PIERCE, The phrase "chosen by an/the authorized holder of the card 
device" has been deleted from claims 28-30 and 50-52. I trust these amendments 
meet with your approval. 



Differences between PIERCE and the current Invention: 

Here are important differences between my invention and that of PIERCE: 

1 . PIERCE describes a system that re-directs data from the retailer subsystem to the 
appropriate card issuer subsystem. The use of a card translator subsystem to 
translate (without additional input) an identification number and index 
number to a single account number is not in the teachings of either PIERCE 
or ROSE. 

2. The claims in this patent application point out, as shown in Figure 6 of the 
drawings, that a card translator (a subsystem to convert an identification number 
and index number to a single account number) may be located in, or connected to, 
a client/retailer subsystem, an issuer subsystem or an intermediate subsystem 
usually referred to in the industiy as a card processor. 

3. As stated earlier, I believe using the words "identify" and "single account 
number" in my claims differentiates this invention frorti ROSE and PIERCE. I 
have amended my claims to state that the data identification number and the index 
number identify a single account number, clearly different from the teachings of 
ROSE and PIERCE. The phrase "chosen by an/the authorized holder of the card 
device" has been deleted from claims 28-30 and 50-52. I trust these amendments 
meet with your approval. 
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AMENDED CLAIMS 



1-27. (Previously cancelled). 



28. (Amended) A system allowing a single card device to be ' 
utilized in accessing a plurality of applications, the system 
comprising: 

(a) a card processing system; 

(b) a card reader communicatively coupleable to the card 
processing system, the card reader being operative to 
read a data identification number from the single card 
device and to receive an'inde)c_numbec)selected by a user 
of the card device through a data interface; 

(c) the processing system, in response to receiving the data 
identification number and said index number from the 
card reader, being operative to identify [an] a single 
account number associated with the data identification 
number and said index number when the index number is 
within a first subset of index numbers [chosen by an 
authorized holder of the card device] from a domain of 
potential index numbers. 

29. (Amended) The system of Claim 28, wherein the processing 
system, in response to receiving the data identification number 
and said index number from the card reader, is operative to 
disable the card device from further use when the Index 
number is within a second subset of index numbers [chosen 
by the authorized holder of the card device] from the 
domain of potential index numbers. 

30. (Amended) The system of Claim 28, wherein the processing 
system, in response to receiving the data identification number 
and said index number from the card reader, is operative to re- 
enable a disabled card device when the index number is within 
a third subset of index numbers [chosen by the authorized 
holder of the card device] from the domain of potential index 
numbers. 
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31. (Cancelled). 

32. (Amended) A system using a single card device to access a 
plurality of applications, comprising: 

a) at least one card issuer subsystem; 

b) at least one card translator subsystem;-^ 

c) a client subsystem, comprising: 

i. a card reader, capable of reading data including at least an 
identification number from the card device; 

ii. a data entry means; 
ill. means to: 

1. read data including at least the identification number 
from the card device; 

[2. determine from said data whether the 
Identification number needs to be translated to an 
account number;] 

[3.] 2^ [prompt user of the card device to enter] accept 
an index number oertainina to a sinole account number 
using the data entry means; 

[4.] 3. send a request to retrieve the [an] account 
numbe r, said request[,] comprising the identification 
number and the index number, to a card translator 
subsystem; 

[5.] 4^ receive a response comprising [to] the account 
number [request] from the [card translator] subsystem 
to which the request was sent . 
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33. (Cancelled). 
. 34. (Cancelled). 

35. (Amended) The system of claim 32, wherein the [account 
number] request is sent to a card processor subsystem that is 
operative to receive the request from any subsystem, process 

\ the request to determine that a card translator subsystem should 

Q receive the request, and transmit the request to the card 

translator subsystem. 

36. (Amended) The system of claim 32, wherein the [account 
number] request is sent to a card issuer subsystem that is 
operative to receive the request from any subsystem, process 
the request to determine that a card translator subsystem should 
receive the request, and transmit the request to the card 
translator subsystem. 

37-43. (Cancelled). 

44. (Amended) The system of claim [37] 32, wherein the card 
translator subsystem is communicatively coupleable to a sySt^ 
from the group comprising a client subsystem, a card processor 
subsystem and a card issuer subsystem. 
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45. (Amended) A method for secure processing of multi-application 
card transactions, comprising the steps of: 

a) reading data including at least an identification number from a^ 
card device: 

[b) determining from said data whether the identification 
number needs to be translated to an account number;] 

[c) ] b) accepting an index number, pertaining to a single account v 
number, using a data entry means; 

[d) ] c} sending a request to retrieve a single [an] account number^ ^ 
said requests including] comprising the identification number, 
[together with] and the index number, to a card translator 
subsystem; 

[e) ] d} [using the identification number and the Index number, v 
retrieving] receiving account information [pertaining to] 

comprising the single account number from the s ubsvstem to 
which the reouest was sent . 

46. (Amended) The method of claim 45, further including sending 
the [account number] request to a card processor subsystem 
that is operative to receive [a] tiie request from any subsystem, 
process the request to determine that the card translator 
subsystem should receive the request, and transmit the request 
to the card translator subsystem. 

47. (Amended) The method of claim 45, further including sending 
[an account number] the request from a card processor 
subsystem that is operative to initiate the request [including] 
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comprising an identification number[, together with] and an 
index number, to the card translator subsystem. 

48. (Amended) The method of claim 45, further including sending 
the [account number] request to a card issuer subsystem that 
is operative to receive [a] the request from any subsystem, 
process the request to determine that the card translator 
subsystem should receive the request, and transmit the request 
to the card translator subsystem. 



49. (Amended) The method of claim 45, further including sending 
[an account number] the request from a card issuer subsystem 
that is operative to initiate the request [including] comprising an 
identification number[, together with] and an index number, to 
the card translator subsystem. 



50. (Amended) A method allowing a single card device to be 
utilized in accessing a plurality of applications, the method 
comprising the steps of: 

a. reading a data identification number from the single card 
device; 

b. receiving an index number selected by a user of the card 
device through a data interface; 

c. identifying [an] a single account number associated with 
the data identification number and said index number 
when the index number is within a first subset of index 
numbers [chosen by an authorized holder of the card 
device] from a domain of potential index numbers. 
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51. (Amended) The method of claim 50. further including disabling 
the card device from further use when the index number is 
within a second subset of index numbers [chosen by the 
authorized holder of the card device] from the domain of 
potential index numbers. 

52. (Amended) The method of claim 50, further including re- 
enabling a disabled card device when the index number is within 
a third subset of index numbers [chosen by the authorized 
holder of the card device] from the domain of potential index 
numbers. 

53. (Cancelled). 
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